(wip) whitelist Puppet informational cert exts